VLC: Multiple vulnerabilities
Multiple vulnerabilities have been found in VLC, the worst of which could lead to user-assisted execution of arbitrary code.
See GLSA 201411-01 for more information.

Perl, Perl Locale-Maketext module: Multiple vulnerabilities
Multiple vulnerabilities have been found in Perl Locale-Maketext module, allowing remote attackers to inject and execute arbitrary Perl code.
See GLSA 201410-02 for more information.

Bash: Multiple vulnerabilities
Multiple parsing flaws in Bash could allow remote attackers to inject code or cause a Denial of Service condition.
See GLSA 201410-01 for more information.

Bash: Code Injection (Updated fix for GLSA 201409-09)
A parsing flaw related to functions and environments in Bash could allow attackers to inject code. The unaffected packages listed in GLSA 201409-09 had an incomplete fix.
See GLSA 201409-10 for more information.

Bash: Code Injection
A parsing flaw related to functions and environments in Bash could allow attackers to inject code.
See GLSA 201409-09 for more information.

libxml2: Denial of Service
A vulnerability in libxml2 allows a remote attacker to cause Denial of Service.
See GLSA 201409-08 for more information.

c-icap: Denial of Service
A vulnerability in c-icap could result in Denial of Service.
See GLSA 201409-07 for more information.

Chromium: Multiple vulnerabilities
Multiple vulnerabilities have been found in Chromium, the worst of which can allow remote attackers to cause Denial of Service.
See GLSA 201409-06 for more information.

Adobe Flash Player: Multiple vulnerabilities
Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.
See GLSA 201409-05 for more information.

Figure 1.1: Iron Penguin

Gentoo Linux is proud to announce the availability of a new LiveDVD to celebrate the continued collaboration between Gentoo users and developers, The LiveDVD features a superb list of packages, some of which are listed below.

A special thanks to the Gentoo Infrastructure Team and likewhoa. Their hard work behind the scenes provide the resources, services and technology necessary to support the Gentoo Linux project.

• Packages included in this release: Linux Kernel 3.15.6, Xorg 1.16.0, KDE 4.13.3, Gnome 3.12.2, XFCE 4.10, Fluxbox 1.3.5, LXQT Desktop 0.7.0, i3 Desktop 2.8, Firefox 31.0, LibreOffice 4.2.5.2, Gimp 2.8.10-r1, Blender 2.71-r1, Amarok 2.8.0-r2, Chromium 37.0.2062.35 and much more ...
• If you want to see if your package is included we have generated both the x86 package list, and amd64 package list. The FAQ is located at FAQ. DVD cases and covers for the 20140826 release are located at Artwork. Persistence mode is back in the 20140826 release!.

The LiveDVD is available in two flavors: a hybrid x86/x86_64 version, and an x86_64 multi lib version. The livedvd-x86-amd64-32ul-20140826 version will work on 32-bit x86 or 64-bit x86_64. If your CPU architecture is x86, then boot with the default gentoo kernel. If your arch is amd64, boot with the gentoo64 kernel. This means you can boot a 64-bit kernel and install a customized 64-bit user land while using the provided 32-bit user land. The livedvd-amd64-multilib-20140826 version is for x86_64 only.

If you are ready to check it out, let our bouncer direct you to the closest x86 image or amd64 image file.

If you need support or have any questions, please visit the discussion thread on our forum.

Thank you for your continued support,
Gentoo Linux Developers, the Gentoo Foundation, and the Gentoo-Ten Project.

The May 2014 GMN issue is now available online.

This month on GMN:

• Interview with Gentoo developer Brian Dolbec (dol-sen)
• Samba 4, sys-power/upower updates, infrastructure hosting needs
• Latest Gentoo news, tips, interesting stats and much more.

Recent versions of OpenSSL were found to be affected by an information disclosure vulnerability related to TLS heartbeats, nicknamed Heartbleed. It allows attackers to read up to 64kb of random server memory, possibly including passwords, session IDs or even private keys.

After the public disclosure on April 7, we have confirmed that several services provided by Gentoo Infrastructure were vulnerable as well. We have immediately updated the affected software, recreated private keys, reissued certificates, and invalidated all running user sessions. Despite these measures, we cannot exclude the possibility of attackers exploiting the issue during the time it was not publicly known to gain access to credentials or session IDs of our users. There are currently no indications this has happened.

However, to be safe, we are asking you to reset your passwords used for Gentoo services within the next 7 days. You need to take action if you have an account on one of the following sites:

• blogs.gentoo.org
• bugs.gentoo.org
• forums.gentoo.org
• wiki.gentoo.org

After 7 days, we will be removing all passwords to avoid abuse. For more information and the full announcement, visit infra-status.gentoo.org/notice/20140413-heartbleed.

The March 2014 GMN issue is now available online.

This month on GMN:

• Interview with Gentoo developer Tom Wijsman (TomWij)
• Tracking the history of Gentoo: Gentoo Galaxy
• Latest Gentoo news, tips, interesting stats and much more.

The February 2014 GMN issue is now available online.

This month on GMN:

• Interview with Gentoo developer Sven Vermeulen (swift)
• Latest Gentoo news, job openings, interesting stats and much more.

The January 2014 GMN issue is now available online.

This month on GMN:

• Meet up with Gentoo developers and users at this years FOSDEM'14 event.
• Give back by helping the proxy-maintainers project.
• Latest Gentoo news, job openings, interesting stats and much more.

The December 2013 GMN issue is now available online. This month on GMN:

• Interview with Sergey Popov. A Gentoo developer and the team leader of Qt, proxy-maintainers and desktop-effects teams.
• Overall Gentoo activity status with bugzilla, portage and developer statistics.

The November 2013 GMN issue is now available online. This month on GMN:

• Interview with Richard Freeman. A Gentoo developer, Council and Trustees member.
• Gentoo as a development environment for newcomers.
• Overall Gentoo activity status with bugzilla, portage and developer statistics.

Imagination Technologies has donated two MIPS64-based Ubiquiti ERLite-3 routers, plus resources to aid Gentoo in providing up-to-date root file system builds for MIPS.

Imagination Technologies is a global leader in multimedia, processor and communication technologies. The company creates and licenses market-leading IP solutions for graphics, video and vision, CPU/general purpose processing, multi-standard communications and connectivity, and cross-platform voice and video communications. Imagination's MIPS CPU cores and architectures range from solutions for ultra low-power 32-bit microcontrollers to high-performance 32/64-bit advanced applications and network processing. MIPS is supported by a broad ecosystem of tools and software including open source Linux distributions like Gentoo.